This public procurement record has 1 release in its history.

Award

17 Sep 2026 at 09:11

Summary of the contracting process

The Driver and Vehicle Standards Agency (DVSA) procured computer audit and testing services covering penetration testing and IT health checks. The requirement was a call-off from the Cyber Security 3 framework (RM3764iii), for assessing and testing the agency’s information technology and cyber security arrangements. Services may be delivered across the United Kingdom, the Channel Islands, the Isle of Man, Europe, British Overseas Territories and other locations worldwide. This is a services contract rather than a goods supply or construction project. It is relevant to cyber security consultancies and technical testing providers with the capability to plan and carry out penetration tests and IT health checks for a UK government agency operating across a broad geographic area.

The procurement is complete and has been awarded through a selective call-off from a framework agreement. Bids had to be submitted by 29 May 2026 at 14:00. DVSA awarded the contract to Dionach Limited on 27 August 2026 for £533,333. The contract runs from 27 August 2026 to 26 August 2028. The published procurement value and awarded value are both £533,333. The process used the Cyber Security 3 framework, with no separate lots identified. The award record shows one active award and one supplier. The procurement was classified as computer audit and testing services, and the stated requirement was for penetration testing and IT health checks.

This award demonstrates established public-sector demand for penetration testing and IT health checks from DVSA, with work sourced through the Cyber Security 3 framework. A credible future competitor would need to provide both penetration testing and broader IT health-check capability, understand the assurance needs of a government agency, and deliver consistently across the United Kingdom and potentially overseas locations. The requirement was identified as suitable for small and medium-sized enterprises, so scale alone is not the defining barrier. Suppliers should be able to operate within a framework call-off route, manage a substantial multi-year cyber assurance engagement, and show the technical capacity, governance and delivery discipline needed for repeat testing and health-check work.

How relevant is this notice?

Notice Information

Notice Title

Penetration Testing/IT Health Checks 2026

Notice Description

THIS WAS A CALL - OFF FROM A CCS FRAMEWORK CYBER SECURITY 3 RM3764iii

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-a8e4106b-c9ac-4a72-9965-5c7c996e74bf
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/0a7c52c6-2243-4e38-985b-656988d6fd5e
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Selective
Procurement Method Details
Call-off from a framework agreement
Tender Suitability
SME
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72800000 - Computer audit and testing services

Notice Value(s)

Tender Value
£533,333 £500K-£1M
Lots Value
Not specified
Awards Value
£533,333 £500K-£1M
Contracts Value
Not specified

Notice Dates

Publication Date
17 Sep 20262 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
27 Aug 20261 months ago
Contract Period
27 Aug 2026 - 26 Aug 2028 2-3 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Not Specified
Awards Status
Active
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
Driver and Vehicle Standards Agency
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
BRISTOL
Postcode
BS5 0DA
Postcode Area
Bristol
Country
England

Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK5 West of England
Small Region (ITL 3)
TLK51 Bristol, City of
Delivery Location
Not specified

Local Authority
Bristol, City of
Electoral Ward
Lawrence Hill
Westminster Constituency
Bristol East

Supplier Information

Number of Suppliers
1
Supplier Name

Dionach Limited

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...